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AMENDMENTS TO THE CLAIMS 



1. (Currently Amended) A method for implementing a modular exponentiation in a 
cryptographic operation on a digital message in a computer system, the modular exponentiation 
involving a secret exponent key, p rot e oting - publio kov oohomoo from timing, power monitoring 
and fault attacks the method comprising the steps of: 

obtaining a message for use in a orypotographic op e ration; 

obtaining a modulus and an e xpon e nt corresponding to said crypotogrophio operation, 
wh e r e in said e xponent oontoin e- at - lea s t on e hit; 

initializing a first valuo aa a ono, and asaigning said - m e ssag e to a s e cond value; 

e x e cuting a modulo e xponentiation algorithm on oaoh bit of oaid e xpon e nt from th e most 
significant bit to th e l e ast signifioont bit, whoroin said algorithm comprising th e s t e ps of: 

input a bit to an inverter - nnd storing tho output ao a third v a tee? and - afisigning th e n e xt bit 
of said bit as a fourth bit; 

if s aid third valu e i s a zero, updating -s aid first - valu e with tho result of squaring, modulo 
ooid modulus said first valu e , if s aid third valu e is a one, updating said fir s t valu e with tho result 
of multiplying, modulo s aid modulus said first valu e by said s e cond valu e ; and 

if said fourth valuo is a zaro, updating Gaid first valuo with tho roGult of squaring, modulo 
said modulus said first valu e , if said fourth value-is a ono, updating ooid first valuo with tho rooult 
of - multiplying, modulo said modulus said first valu e by said oeoond valuo; 

updating ooid bit with th e next bit of said bit, and executing stops of said algorithm on 
said bit until said bit b e ing said least significant - bit of said oxponontroad 

storing and output said first valuo 
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unconditionally performing a first modular multiplication by multiplying a first 
multiplicand variable by a first multiplier variable followed bv a modular operation and storing 
result of the first modula r multiplication into a first variable: 

unconditionally performing a second modular multiplication bv multiplying a second 
multiplicand variable bv a second multiplier variable followed by the modular operation and . 
storing result of the second modular multiplication into the first variable: and 

outputting a final result of the modular exponentiation from a memory location of the 
first variable in the computer system, 

wherein the first variable, the first multiplicand variable and the second multiplicand 
variable are purposely arranged to be the identical variable . 

2. (Currently Amended) {[AJjThe method according to claim 1, wherein if - oaid bit in oaid 
l e ast significant bit of said expon e nt, said fourth valu e is initializ e d as l w herein the first 
multiplier variable is respectively set to 1 and said digital message if a first examined bit is 
respectively equal to 1 and 0: the second multiplier variable is respectively set to 1 and said 
digital message if a se cond examined bit is respectively equal to Q and 1: and the first and second 
examined bits are adjacent binary digits composing said secret exponent key . 

3. (Currently Amended) [[A]]The method according to claim 2, wher e in said bit is on e bit 
of bite of oaid exponent and is a on e or a z e r o further characterized bv that no multiplier of any 
multiplication operation is arranged to store an intermediate result of any modular multiplication 
operation such that the method is resistant to M safe error attacks . 
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4. (Cancelled) 

5. (Currently Amended) An apparatus performing a cryptographic operation on a digital 
message, the apparatus comprising a computer program executing a modular exponentiation 
involving a secret exponent key, the computer pipogram being implemented by a programming 
lan g ua g e source comprising codes executing the steps of: for proteoting - publio kov oohomoa from 
timing, pow e r monitoring and fault attacks comprising; 

means for obtaining a - moooago for uoo in a orypotographic op e ration; 

means for obtaining a modulus and an exponent corr e sponding to said crypotographio 
o peration, whoroin said e xpon e nt - contains at least e o e- bit; 

m e ans for initializing a first voluo ao a ono, and assigning said me s sag e to a se cond value; - 

means for e x e cuting a modulo oxponontiation algorithm on e ach bit of said exponen t 
from tho most significant bit to th e l e ast significant bit^ whoroin oaid algorithm comprising: 

moans for input a bit into an inv e rt e r and storing th e output as a third valuo, and aligning 
th e n e xt bit of said bit an a fourth bit; 

m e an s for dcrtonnining wh et h e r - said third value is a on e or a z e ro; 

m e ans for updating oaid first valuo with tho rooult of squaring if said third valu e is a on e , 
modulo said modulus said first value, updating said firot voluo with tho rooult of multiplying, 
modulo said modulus said first valu e by said s e cond valu e if said third valu e is a one; 

m e ans for d e t un nining whether said fourth valuo ia a ono or a a e ro; and 
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m e an s for updating said first - valuo with tho rooult of equaling, modulo said modulus sai d 
first valu e if said fourth valu e i s -a zero, updating paid first valu o with th e r e sult of multiplying, 
modulo said modulus said firot valuo by said second value if said fourth valuo is a ono; 

meafls- for updating oaid bit with tho next bit of said bit, and e x e cuting st e ps of oaid 
algorithm on said bit until ooid bit boing ooid least significant bit of said e xponent; 

m e ans for d e termining whothor ooid bit io a ono ot - a - gero; and 

moono for storing and output said first value 

unconditionally performing a first modular multiplication by multipl yin g a first 
multiplicand variable bv a first multiplier variable followed bv a modular operation and storing 
result of the first modular multiplication into a first variable: 

unconditionally performing a second modular multiplication by multiplying a second 
multiplicand variable bv a second multiplier variable followed bv the modular operation and 
storing result of the second modular multiplication into the first variable; and 

outputting a final result of the modular exponentiation from a memory location of the 
first variable in the apparatus. 

wherein the first variable, the first multiplicand variable and the second multiplicand 
variable are purposely arranged to b e the identical variable . 

6. (Currently Amended) [[An]] The apparatus according to claim 5, whoroin ooid bit is 
on e bit of bits of oaid oxponont and jp a ono or a zero wherein the first multiplier variable is 
respectively set to 1 and said digital message if a first examined bit is respectively equal to 1 and 
0: the second multiplier variable is respectively set to 1 and said digital message if a second 
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examined bit is respectively equal to 0 and 1: and the first and second jammed h its are adjacent 
binary digits composing said secret exponent key . 

7, (Currently Amended) [[An]] The apparatus according to claim 5, wh e r e in said invortor 
kHftfied for output a on e if input o zoro into it, and output a zoro if input a on e into i t further 
charactered by that no multiplier of any multiplication operation is arra nged to store an 
intermediate result of anv modular multiplication operation such that the apparatus is resistant to 
M safe error attacks . 

8. (Currently Amended) A computer-readable medium containing a computer program 
performing a cryptographic operation on a digital message, the computer program when 
executed in a computer system, executing a modular exponentiation involving a secret exponent 
key, the computer program being implemented by a programming language source comprising 
codes executing the steps of: for protecting public kev soh e mon from timing, power mom'toring 
and fault attacks containing logio oodo that e x e cuting th e steps of: 

obtaining a messag e for us e in aorypotographio operation; 

obtaining a modulus and on e xponent corresponding to caid crypotographio op e ration? 
wh e rein said exponent contains at l e ast o ne-bin 

initializing a first valuo as a one, and assigning said m es sage to a aooond valuo; 

oxoouting a modulo exponentiation algorithm on oaoh bit of said exponent from the most 
significant bit to the loant significant bit, wher e in said algorithm oomprioing fee steps of: 
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aap ut a bit to on inventor and storing tho output - oa - a third valu e , and assigning tho next bit 
of said bit ao a fourth bit; 

if arid third valuo is a zero, updating said first valu e with th e r e sult of oquoring, modulo 
oaid modulus said first valu e , if said third valuo i s a one, updating said firot valuo with th e r e sult 
of multiplying, modulo said modulu s said first valu e by said se cond valu e ; - an d 

if said fourth valu e is a zero, updating said first valu e with th e r es ult of squaring, modulo 
said modulus said first valuo, if said fourth value ia a ono, updating said first valuo with tho result 
of multiplying, modulo said modulus said first valuo by oaid sooond valuo; 

updating said bit with tho noxt bit of s aid bit, and e x e cuting stops of aaid algorithm on 
said bit until said bit b e ing s aid looot significant bit of said e xpon e nt; and 

storing and output said first valuo 

unconditionally performing a first modular multiplication bv multi plying a first 
multiplica nd variable by a first multiplier variable followed by a modular operation and storing 
result of the first modular multiplication into a first variable: 

unconditionally performing a second modular multiplication by multiplying a second 
multiplicand variable bv a second multiplier variable followed bv the modular operation and 
storing result of the second modular multiplication into the first variable: and 

outputting a final result of the modular exponentiation from a memory location of the 
first variable in the computer system, 

wherein the first variable, the first multiplicand variable and the second multiplicand 
variable are purposely arranged to be the identical variable . 
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9. (Currently Amended) [[A]] The computer-readable medium according to claim 8, 
wh e rein if said bit ia aoid loact oignitloont bit of said e xpon e nt said-fourth valuo io initialized as 1 
wherein the fir st multiplier v ariable is respectively set to 1 and said digital message if a first 
examined_bit is respectively equal to 1 and 0: the second multiplier variable is respectively set to 
1 and said digital message if a second examined bit i s respectively equal to 0 and 1: and the first 
and second examined bits are adjacent binary digits composing said secret exponent kev . 

10. (Currently Amended) [[A]] The computer-readable medium according to claim 9, 
wherein oaid invortor io used for output a on e if input a zero into it, and output a zoro if input a 
on e into it further ch a racterized by that no multiplier of any multiplication operation is arranged 
to store an intermediate result of anv modular multiplication operation suc h that the computer 
system is resistant to M sa fe error attacks . 

11. (Cancelled) 
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